News for hackers. Stuff that matters.

A comment on Issue with TLS-SNI-01 and Shared Hosting Infrastructure. Parent comment

Re:Issue with TLS-SNI-01 and Shared Hosting Infrastructure by mdhardeman on Wednesday January 10, 2018 @05:03PM (#16119558)
Even if you could find them all and make automatic determinations as to whether or not they facilitate the vulnerability. (You really can't automate that as you need to be a customer of the host to really attempt to pull off the exploit.)

Even if... You would only know for the set of web hosts for the time period you checked each one.

New ones come and old ones die every day.

[ Parent | on HN ]
Re:Issue with TLS-SNI-01 and Shared Hosting Infrastructure by zeroimpl on Wednesday January 10, 2018 @07:59PM (#16120611)
You don't need to keep a master list of IP addresses up to date, you only have to test an IP when a request for a cert comes in from that IP.
[ Parent | on HN ]